$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea0bb990-8b31-3300-a347-e3c5f724d661.roa File: ea0bb990-8b31-3300-a347-e3c5f724d661.roa (raw, json) Hash identifier: xXvGCE/WBo7PDukiwyE3GcM4wvTxjcB07eTiZFodAe8= Subject key identifier: BB:98:BD:67:BB:BF:39:70:B5:1B:2E:4E:7E:9E:06:61:68:20:92:CA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F979DC30C733381CE60B49A30 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea0bb990-8b31-3300-a347-e3c5f724d661.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 265620 IP address blocks: 38.19.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:c3:0c:73:33:81:ce:60:b4:9a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=30807599-3b3c-486e-96f7-82c3adccc8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:bc:23:ee:d5:e6:e1:1b:cb:18:87:1f:84: 70:c2:1b:d2:1c:5f:08:d1:0a:4b:e7:88:1a:af:e0: 38:fc:fd:8b:89:e1:28:b7:b3:5a:c5:93:53:3a:f5: fb:29:62:16:26:ce:58:d0:84:6b:0f:07:ba:ca:28: bd:4e:e8:90:1e:cf:20:cd:d0:53:63:36:4a:a4:09: 7f:ad:bb:50:3f:21:99:f6:56:01:46:a6:98:94:7d: 69:c8:f0:0c:d3:a6:ed:c0:1e:b5:b6:bb:9b:8d:82: 66:d0:d6:92:08:4b:ec:df:8b:ed:74:5e:c9:3c:b3: 23:88:9c:63:37:6a:80:79:2c:ec:67:5a:b9:7a:9b: 0a:47:43:78:9d:ee:3a:44:36:0b:5b:0f:4f:fa:7c: 40:9b:89:67:c5:38:c5:78:42:b0:c8:9d:3c:b5:45: 52:77:cf:cf:c5:e5:16:a7:bc:e1:88:d4:b2:e7:e5: 16:20:88:7b:27:b3:56:79:15:18:35:68:17:eb:9d: 05:ee:a1:c5:db:98:9a:0e:e4:1a:be:cb:c4:e1:f7: db:b3:06:88:55:e2:44:cd:b3:3e:35:b6:e9:38:b3: 37:f8:19:88:1b:61:1d:d1:cb:5c:2f:5b:68:e1:af: 74:83:10:05:06:6a:45:31:29:df:91:30:fa:37:65: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:98:BD:67:BB:BF:39:70:B5:1B:2E:4E:7E:9E:06:61:68:20:92:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea0bb990-8b31-3300-a347-e3c5f724d661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1f:84:12:c9:91:60:32:ec:36:3e:82:38:4d:09:dc:f4:10: c3:65:6c:9e:9f:d8:95:c2:fc:57:ec:af:7f:a2:3f:6b:1a:6f: c5:a4:1b:a4:c6:f6:82:d2:cc:80:1c:bc:af:7d:4b:0d:b9:04: a7:b8:bf:14:65:52:84:55:3c:1f:68:b2:eb:ae:21:f4:ef:3b: c5:46:a5:df:6a:f5:e0:b4:ca:67:96:f3:3a:ec:de:4e:6f:90: 69:f2:18:a2:da:fe:c2:6c:a9:52:84:e7:2a:3d:70:3d:78:1c: c6:96:d8:47:7d:40:76:67:3b:50:7f:ab:d9:69:91:c1:a9:cc: 69:1e:34:bb:12:5c:05:c1:92:cf:ca:42:de:df:8d:d5:85:88: 1e:8e:ba:4b:66:d5:24:43:f8:cf:32:e6:39:b8:e8:07:ae:2a: 8a:8d:0a:de:f0:94:a9:35:1c:72:03:60:83:7d:33:91:64:23: 80:6b:7a:64:08:be:14:44:5d:32:a7:c2:66:02:75:7f:62:86: 3c:15:05:74:9c:e2:7e:5c:d0:f9:c1:7c:e9:69:ef:11:b3:14: f8:f2:86:ca:37:82:0a:92:81:78:27:70:43:99:01:b2:44:44: 3a:39:f6:07:71:fa:c0:66:e5:bb:77:ef:e4:88:93:85:bf:63: f3:0f:72:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XncMMczOBzmC0mjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MzA4MDc1OTktM2IzYy00ODZlLTk2ZjctODJjM2FkY2NjOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2a8I+7V5uEbyxiHH4RwwhvSHF8I0QpL54ga r+A4/P2LieEot7NaxZNTOvX7KWIWJs5Y0IRrDwe6yii9TuiQHs8gzdBTYzZKpAl/ rbtQPyGZ9lYBRqaYlH1pyPAM06btwB61trubjYJm0NaSCEvs34vtdF7JPLMjiJxj N2qAeSzsZ1q5epsKR0N4ne46RDYLWw9P+nxAm4lnxTjFeEKwyJ08tUVSd8/PxeUW p7zhiNSy5+UWIIh7J7NWeRUYNWgX650F7qHF25iaDuQavsvE4ffbswaIVeJEzbM+ NbbpOLM3+BmIG2Ed0ctcL1to4a90gxAFBmpFMSnfkTD6N2Vt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuYvWe7vzlwtRsuTn6eBmFoIJLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWEwYmI5OTAtOGIzMS0z MzAwLWEzNDctZTNjNWY3MjRkNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhP9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0fhBLJkWAy7DY+gjhNCdz0EMNlbJ6f2JXC/Ffsr3+iP2sab8WkG6TG 9oLSzIAcvK99Sw25BKe4vxRlUoRVPB9osuuuIfTvO8VGpd9q9eC0ymeW8zrs3k5v kGnyGKLa/sJsqVKE5yo9cD14HMaW2Ed9QHZnO1B/q9lpkcGpzGkeNLsSXAXBks/K Qt7fjdWFiB6Ouktm1SRD+M8y5jm46AeuKoqNCt7wlKk1HHIDYIN9M5FkI4BremQI vhREXTKnwmYCdX9ihjwVBXSc4n5c0PnBfOlp7xGzFPjyhso3ggqSgXgncEOZAbJE RDo59gdx+sBm5bt37+SIk4W/Y/MPcmw= -----END CERTIFICATE-----Generated at Tue Oct 27 12:23:34 2026 by rpki-client